https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:47:35 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-286726 EUVD-2026-286726 https://cve.radiocsirt.org/vuln/euvd-2026-286726 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6696 <p>The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 4.3.1. While some functions contain a nonce check, the nonce can be obtained from the profile page of a logged-in user. This allows subscribers to perform several actions including deleting subscribers and perform blind Server-Side Request Forgery.</p> <p>The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 4.3.1. While some functions contain a nonce check, the nonce can be obtained from the profile page of a logged-in user. This allows subscribers to perform several actions including deleting subscribers and perform blind Server-Side Request Forgery.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-6696 https://cve.radiocsirt.org/vuln/ghsa-988h-7hff-q3fr <p>The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 4.3.1. While some functions contain a nonce check, the nonce can be obtained from the profile page of a logged-in user. This allows subscribers to perform several actions including deleting subscribers and perform blind Server-Side Request Forgery.</p> <p>The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 4.3.1. While some functions contain a nonce check, the nonce can be obtained from the profile page of a logged-in user. This allows subscribers to perform several actions including deleting subscribers and perform blind Server-Side Request Forgery.</p> https://cve.radiocsirt.org/vuln/ghsa-988h-7hff-q3fr https://cve.radiocsirt.org/vuln/gsd-2023-6696 gsd-2023-6696 https://cve.radiocsirt.org/vuln/gsd-2023-6696